Cookie policy

This site sets one cookie. It is listed below with what it does, how long it lasts and whether it is strictly necessary. Everything else the site needs to work travels with a page or with a form, and stays in nobody’s browser.

While the site is being built it sits behind a password. Enter the password correctly and this cookie is set, so that the pages you visit next are served to you. Its value is a cryptographic hash of the password, never the password itself.

It is set only when a correct password is entered, it is never exposed to page scripts, it travels only over HTTPS, and it is sent only to this site.

The form carries two hidden values instead, and both live in the form rather than in your browser. One is a signed token issued when the page renders: it records when the page was built and proves that the submission came from a page we rendered. The other is a decoy field that a person never sees and never fills in.

Both travel once, with the submission, and nothing is stored on your device. They are the reason this site needs no captcha, and therefore loads no third-party script on the page where you type a passenger count or an allergen.

This site sets no analytics cookie and no advertising cookie, and it loads no measurement script on any page. Nothing here counts you, follows you between pages or reports a visit to anyone.

The day we add audience measurement, it will arrive with a consent banner, and this page will describe the cookies it sets before it is switched on.

Your browser deletes and blocks cookies, and the setting is yours. Blocking this one means the password page asks again on each visit while the site is private.

A question about this page goes to orders@aerogourmet.com.